om-auto-fix-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill takes an existing PR number (or finds an open PR via search-prs) and then reads PR content/diffs and review comments (via delegated om-auto-review-pr/om-auto-qa-pr and tracker ops like get-pr, plus diff inspection for UI paths in references/stabilize-ci.md), meaning outsider-authored PR text is ingested at runtime.